What you'll do
- Develop and drive the firm’s security testing program aligned with GTOM and SSDLC
- Engage with application teams and security pillar to prioritize and implement security testing methods
- Organize and conduct vulnerability scans, SAST, DAST, and penetration testing
- Advise on and track remediation planning for security issues
- Prepare security dashboards for internal teams and senior leadership
- Ensure compliance with firm policies and standards
- Test and evaluate new technology and related security testing technologies
- Plan and support penetration testing activities with necessary prerequisites
- Interpret security reports and collaborate with ITS team for risk mitigation
- Enhance internal processes within the Information Security risk management program
- Assist in remediation planning and ensure appropriate risk management of control issues
- Evaluate security controls during various IT project lifecycle stages
- Perform technical testing of controls for IT asset compliance assurance
- Assist Security pillar with SSDLC activities including requirements, design, and quality assurance
Key requirements
- 4+ years' experience
- Security testing methods including Vulnerability Scans, SAST, DAST, and Penetration Testing
- Penetration testing techniques and risk treatment collaboration
- Information Security risk management and vulnerability testing
- Network and Security protocols knowledge
- GRC tool, Power BI, and advanced MS Office proficiency
- Security report interpretation and communication skills
- Organizing meetings with stakeholders and IT teams
- SSDLC processes and technical testing of controls
- Self-motivation and enthusiasm
- Engineering / Technology
Benefits
- Modern hybrid workplace with flexible smart working.
- Multiple well-being programs and parental allowances.
- Opportunities for international engagement, learning, and career growth in an inclusive culture.
About the job
What Impact will you make? YOUR OPPORTUNITY The Security Analyst will develop and drive the Firm’s security testing program, in line with the Firm’s Global Technology Operating Model (GTOM) and Secure System Development Lifecycle (SSDLC) programs. The analyst will engage with application teams, and…
About the company
Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we.
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.
About the company
Deloitte drives progress. Our firms around the world help clients become leaders wherever they choose to compete. Deloitte invests in outstanding people of diverse talents and backgrounds and empowers them to achieve more than they could elsewhere. Our work combines advice with action and integrity. We believe that when our clients and society are stronger, so are we.
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited (“DTTL”), its global network of member firms, and their related entities. DTTL (also referred to as “Deloitte Global”) and each of its member firms are legally separate and independent entities. DTTL does not provide services to clients. Please see www.deloitte.com/about to learn more.